Myiosoft

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Myiosoft records in CISA KEV

No Myiosoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easycalendar 5 records LOW Easybookmarker 4 records LOW Easynews 3 records LOW Ajaxportal 2 records LOW Easydynamicpages 2 records LOW Easye-cards 2 records LOW Easypublish 2 records LOW Easyclassifields 1 record LOW

Records

21 records

TI-2008-01583 CVE-2008-1651 · GHSA-cq2h-f697-9p5m

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote…

LOW 38

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0312 Published 2008-04-02 No fix listed CWE-22

TI-2008-05359 CVE-2008-5651 · GHSA-fhx3-rj3v-69qm

SQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft…

LOW 37

SQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the Parent parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02266 Published 2008-12-17 No fix listed CWE-89

TI-2008-01582 CVE-2008-1650 · GHSA-7g4p-8hcf-w729

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote…

LOW 36

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01313 Published 2008-04-02 No fix listed CWE-89

TI-2009-02158 CVE-2009-2262 · GHSA-3pg2-4qfr-5gqp

PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote…

LOW 35

PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01236 Published 2009-06-30 No fix listed CWE-94

TI-2009-01430 CVE-2009-1509 · GHSA-v465-jg3m-pfpv

SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote…

LOW 35

SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-05-01 No fix listed CWE-89

TI-2008-05363 CVE-2008-5655 · GHSA-xw99-jr69-5j43

Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) delete_folder and (2) delete_link parameters to unspecified vectors, possibly to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00913 Published 2008-12-17 No fix listed CWE-89

TI-2008-05362 CVE-2008-5654 · GHSA-frqr-h5gh-5cr8

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft…

LOW 35

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-12-17 No fix listed CWE-89

TI-2008-05360 CVE-2008-5652 · GHSA-qgp6-fq4c-vf43

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft…

LOW 35

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username param…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01236 Published 2008-12-17 No fix listed CWE-89

TI-2008-03208 CVE-2008-3347 · GHSA-v8rv-c4hj-xh2q

SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft…

LOW 35

SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to execute arbitrary SQL commands via the read parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2008-07-28 No fix listed CWE-89

TI-2008-03204 CVE-2008-3343 · GHSA-9858-8hj9-8c32

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish…

LOW 35

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01137 Published 2008-07-28 No fix listed CWE-89

TI-2008-01295 CVE-2008-1346 · GHSA-wc22-x6p4-qwgw

SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery…

LOW 35

SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-03-17 No fix listed CWE-89

TI-2008-01293 CVE-2008-1344 · GHSA-hwgp-vq5r-47pc

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow…

LOW 35

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-03-17 No fix listed CWE-89

TI-2008-03918 CVE-2008-4084 · GHSA-86mv-r2r6-8463

SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft…

LOW 32

SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00979 Published 2008-09-15 No fix listed CWE-89

TI-2008-03206 CVE-2008-3345 · GHSA-c79h-6wmh-q4mh

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards…

LOW 32

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00942 Published 2008-07-28 No fix listed CWE-89

TI-2008-03241 CVE-2008-3380 · GHSA-wggr-rm2m-pxcx

Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker…

LOW 24

Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the rs parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2008-07-30 No fix listed CWE-79

TI-2008-01581 CVE-2008-1649 · GHSA-5gp8-cj7x-g2vr

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews…

LOW 24

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01901 Published 2008-04-02 No fix listed CWE-79

TI-2008-03209 CVE-2008-3348 · GHSA-rjf7-p8p7-9xg5

Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in…

LOW 23

Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the year parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01272 Published 2008-07-28 No fix listed CWE-79

TI-2008-03203 CVE-2008-3342 · GHSA-3xc7-4mq4-jmpm

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft…

LOW 23

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_News action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01272 Published 2008-07-28 No fix listed CWE-79

TI-2008-01296 CVE-2008-1347 · GHSA-v34f-7pxj-89jr

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2008-03-17 No fix listed CWE-79

TI-2008-01294 CVE-2008-1345 · GHSA-c2rf-4pw2-jm8g

Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in…

LOW 23

Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayvi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2008-03-17 No fix listed CWE-79

TI-2008-03205 CVE-2008-3344 · GHSA-g26r-chwp-6c79

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) R…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-07-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	12
Medium	9
Low	0
No CVSS	0